Security Incidents mailing list archives

Re: Large ISP response to Code Red?


From: Kris Carlier <root () iguana be>
Date: Tue, 31 Jul 2001 18:53:54 +0200 (MET DST)

To me, this is the answer.  Server based systems usually have
plenty of bandwidth.  A different set of patches could be
offered for the desktop class systems (Win9x, Me, 2k Prof.)
that might be more bandwidth friendly and only applies to

small detail, IIRC, one of the windowsupdate servers fell victim to the CR
attack itself. So, here's a rethorical question: would you like your
system to be automatically updated ? What if the machine you trust is
infected ? Helluvaway to efficiently distribute a worm, no ?

kr=


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: